Control: tags -1 + moreinfo On 2021-03-04 07:06:05, Stephen Kitt wrote: > Package: release.debian.org > Severity: normal > User: release.debian....@packages.debian.org > Usertags: binnmu > > Dear release team, > > libzstd1 used to provide an over-enthusiastic symbols file, which has > resulted in dependencies which are too relaxed. The library API isn’t > determined by its exported symbols, unfortunately, but by one of its > headers. See https://bugs.debian.org/969597 and > https://github.com/facebook/zstd/pull/2501 for details. > > As a result, a (small) number of packages have picked up a dependency > on “libzstd1 (>= 1.3.8)” when it should be “(>= 1.4.0)” — they were > built with one of the 1.4 packages, but the symbols file declared some > of the 1.4 functions as available in 1.3.8 (which they were, > technically, but with a different API in some cases).
Please explain. If they were available with a different API prior to 1.4, that sounds like an ABI break to me. In that case, the binNMUs would just hide the problem. Cheers > > To fix this, would it be possible to binNMU the following? The version > of libzstd1 no longer provides a symbols file and relies on shlibs to > provide the correct dependency. > > nmu badger_2.2007.2-2 . ANY . unstable . -m "update libzstd1 dependency" > nmu burrow_1.2.1-2 . ANY . unstable . -m "update libzstd1 dependency" > nmu cadvisor_0.38.7+ds1-2 . ANY . unstable . -m "update libzstd1 dependency" > nmu garagemq_0.0~git20200204.15e6a9d+ds-3 . ANY . unstable . -m "update > libzstd1 dependency" > nmu lammps_20210122~gita77bb+ds1-2 . ANY . unstable . -m "update libzstd1 > dependency" > nmu libarchive_3.4.3-2 . ANY . unstable . -m "update libzstd1 dependency" > nmu libdrpm_0.5.0-2 . ANY . unstable . -m "update libzstd1 dependency" > nmu mmllib_12-113e3+ds-3 . ANY . unstable . -m "update libzstd1 dependency" > nmu mysql-8.0_8.0.23-3 . ANY . unstable . -m "update libzstd1 dependency" > nmu rsymphony_3.2.3-4 . ANY . unstable . -m "update libzstd1 dependency" > > Regards, > > Stephen > > > -- System Information: > Debian Release: 10.8 > APT prefers stable-updates > APT policy: (500, 'stable-updates'), (500, 'stable-debug'), (500, > 'stable'), (100, 'unstable-debug'), (100, 'testing-debug'), (100, > 'unstable'), (100, 'testing'), (1, 'experimental-debug'), (1, 'experimental') > Architecture: amd64 (x86_64) > Foreign Architectures: i386, arm64 > > Kernel: Linux 4.19.0-12-amd64 (SMP w/8 CPU cores) > Kernel taint flags: TAINT_WARN, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE > Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), > LANGUAGE=en_GB.UTF-8 (charmap=UTF-8) > Shell: /bin/sh linked to /bin/dash > Init: systemd (via /run/systemd/system) > LSM: AppArmor: enabled -- Sebastian Ramacher